I am new to Palo Alto FWs and have a simple question.
We have a PA-5050 and one of the users has been assigned a "Virtual Administror" role to a specific VSYS. The Administrator type is "Dynamic". This user was trying to get a dump/copy of the configuraiton of the specific VSYS he is assiged to; however, when he did that he was able to get a copy of the configs of other VSYSes.
My question is how do I limit this particular user to access the VSYS to which he was assignged to only and not be able to access the configuraiton of the other VSYSes?
Thanks in advance.
Hi...You need to change the Admin type from Dynamic to 'Device Group and Template Admin' and restrict the admin to the VSYS. Thanks.
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the Live Community as a whole!
The Live Community thanks you for your participation!